Secure Mobile Access 12.5 Administration Guide

Technical Documentation>  Appendix>  Configuring External SAML Identity Providers>  Configuring SAML Authentication Servers>  Configuring Okta as an SMA Authentication Server
Table of Contents

Configuring Okta as an SMA Authentication Server

This section explains how to configure Okta as a SAML Identity Provider for SMA1000.

Prerequisites

  • Admin access to the Appliance Management Console (AMC).

  • Admin access to the Okta Admin Console.

  • The Workplace site FQDN you want to use for this configuration. For example, workplace.company.com.

For the most current information about configuring a SAML application in Okta, refer to https://help.okta.com/en-us/content/topics/apps/apps_app_integration_wizard_saml.htm.

To configure Okta as an SMA Authentication Server

  1. On the Okta admin console, go to Applications > Applications, and click Create App Integration.

  2. Select SAML 2.0, and click Next.

  3. Under General Settings, provide an App name, and click Next.

  4. Under SAML Settings, provide the following values:

    • Single sign-on URL: for example, https://workplace.company.com/saml2ssoconsumer.

    • Audience URI (SP Entity ID): for example, https://workplace.company.com/.

  5. Click Next, and then click Finish.

  6. On the application details page, click the Sign On tab, copy the Metadata URL, and open it in a new browser tab.

    Save the response as a metadata.xml file.

  7. On the application details page, click the Assignments tab, and assign the users and groups that need access to this application.

  8. In the AMC, navigate to System Configuration > Authentication Servers, click New, and select SAML 2.0 Identity Provider.

  9. In the Name field, type a friendly name. For example, Okta.

  10. In the Appliance ID field, enter the same URL you used for the Audience URI (SP Entity ID) in Okta. For example, https://workplace.company.com/.

  11. For the Endpoint FQDN option, select the Workplace site FQDN you decided on earlier. For example, workplace.company.com.

  12. Under Identity Provider Configuration, click Choose File or Browse, and select the metadata.xml file you saved from Okta.

  13. Click Import.

    The Server ID, Authentication service URL, and Trust the following certificate fields are filled in automatically.

  14. Click Save.

  15. Assign this authentication server to the realm.